evalbox-sandbox 0.2.0

Sandbox orchestration for evalbox
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

//! Seccomp user notification support.
//!
//! This module provides the supervisor side of seccomp user notification,
//! enabling syscall interception without Linux user namespaces.
//!
//! ## Modules
//!
//! - **supervisor** - Main notification loop that handles intercepted syscalls
//! - **`virtual_fs`** - Path translation for filesystem virtualization
//! - **`scm_rights`** - Unix socket fd passing (child → parent listener fd transfer)

pub mod scm_rights;
pub mod supervisor;
pub mod virtual_fs;

pub use supervisor::{NotifyEvent, Supervisor};
pub use virtual_fs::VirtualFs;